tried many things, but kept getting the same csrf token missing or incorrect error. So, i guess @csrf_exempt was the last resort